This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft File: JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json) Hash identifier: DmOv0Sk0YneALS3Z5TGzLhpH30cFsf1aC3Jc/g0Cd+g= Subject key identifier: 04:5A:DD:F8:EB:D5:F5:13:B1:63:AC:17:65:0A:7F:B4:AD:FD:EF:A4 Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad Certificate serial: 019AF2AD58842911C02CE00F18D19F5B6EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft Manifest number: 04C5 Signing time: Sat 06 Dec 2025 08:00:37 +0000 Manifest this update: Sat 06 Dec 2025 08:00:37 +0000 Manifest next update: Sun 07 Dec 2025 08:00:37 +0000 Files and hashes: 1: 8Xi47DC6XLMifd_h4diEuTQqT_o.roa (hash: CN0wU8kNDOjW0/AZxclgk/MCq6Ngl7PcvBwvgiUpVIs=) 2: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: FE1elo/oHLA1eJ7IsmoR6B9U6VtxZekSD3eu84X/Vrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:58:84:29:11:c0:2c:e0:0f:18:d1:9f:5b:6e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad Validity Not Before: Dec 6 08:00:37 2025 GMT Not After : Dec 7 08:00:37 2025 GMT Subject: CN=045addf8ebd5f513b163ac17650a7fb4adfdefa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:72:38:07:e6:d2:18:69:22:2d:3e:b3:7a: ec:03:9a:ad:78:ea:8a:24:5d:28:7d:25:62:3c:19: 1e:a0:4c:b8:6d:a6:09:bf:c1:4a:ab:d1:79:50:c6: ea:bc:1d:45:b6:f2:a3:8e:cd:9b:1f:4c:3d:50:c4: a4:93:95:59:38:ad:3c:45:9c:9f:74:14:ee:1f:a4: 16:ac:2b:00:7f:43:8b:f2:fe:aa:55:9b:eb:19:fd: 29:66:90:60:f5:58:9d:7f:d6:49:53:e3:58:b4:a5: c9:a4:07:54:15:a5:9d:40:8d:3c:ca:3a:bf:16:9e: 5f:b2:08:c6:81:cd:fe:6d:da:f9:a1:7c:67:df:85: 5d:42:ea:29:c8:e0:51:28:7e:06:21:9d:6f:07:ee: 07:58:68:6a:0b:98:8a:36:12:0b:be:38:25:a1:ea: e5:92:89:0f:9e:19:3b:61:83:dd:33:60:09:25:ec: 0f:3a:f8:35:52:81:05:47:e1:f7:95:cc:9c:d8:8c: 33:e8:9d:45:bb:2b:2c:5f:5b:3e:0c:5d:ac:f3:73: 2f:7e:06:ee:d0:9e:10:dc:04:1b:42:31:ba:0c:6a: e3:b9:fc:02:3f:94:1b:d1:7a:fe:72:f1:54:28:18: e8:41:0f:b3:ee:6c:04:64:6c:0f:4c:4e:2a:16:ff: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5A:DD:F8:EB:D5:F5:13:B1:63:AC:17:65:0A:7F:B4:AD:FD:EF:A4 X509v3 Authority Key Identifier: keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7c:cf:17:37:92:30:88:9f:22:a7:0a:00:5a:76:96:1b:8b: 77:a5:c8:95:b8:e7:e1:27:0d:d4:b4:bb:b4:e4:ba:cd:48:3d: 7a:40:62:8e:91:55:42:a8:69:28:c8:2b:a4:2b:53:6c:cb:e7: 7a:8c:28:d8:77:21:00:ed:fe:8f:4b:f2:39:9f:2c:11:4b:bf: 82:87:88:8c:55:35:9e:9d:70:41:8b:91:f7:f3:63:ff:ab:cf: a2:7b:3d:5b:9c:90:9e:40:d7:a3:75:d7:9f:80:15:3b:2a:10: f4:31:99:d3:92:bb:6c:64:26:b1:e4:90:20:58:2b:5c:98:0d: 4e:88:6e:56:ac:e7:49:4c:99:ff:d9:10:b6:1c:d7:71:7f:24: 5f:da:16:13:a0:84:51:ca:22:b6:7f:a5:9d:5c:16:54:16:36: c5:eb:95:67:89:25:d0:95:77:53:3f:9b:6c:73:ee:fe:98:3f: d5:66:10:4c:6a:6d:75:c1:b0:b1:81:3e:4c:b3:19:9d:6e:37: 63:88:e1:ca:c6:20:46:6d:d5:7c:88:4d:b2:41:4d:18:f5:7e: 48:07:8d:38:95:22:a4:b7:7c:d6:4a:ba:60:99:e9:9e:92:49: 12:65:d5:80:5c:18:18:4f:31:f1:1d:fe:b2:e5:ff:66:e3:94: f0:1a:dc:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrViEKRHALOAPGNGfW269MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MzViMTlkYjI3ZDNmMmQ3N2Q0MDgxODg0NTNiZTI2YjM0 NTUwYWQwHhcNMjUxMjA2MDgwMDM3WhcNMjUxMjA3MDgwMDM3WjAzMTEwLwYDVQQD EygwNDVhZGRmOGViZDVmNTEzYjE2M2FjMTc2NTBhN2ZiNGFkZmRlZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMJyOAfm0hhpIi0+s3rsA5qteOqK JF0ofSViPBkeoEy4baYJv8FKq9F5UMbqvB1FtvKjjs2bH0w9UMSkk5VZOK08RZyf dBTuH6QWrCsAf0OL8v6qVZvrGf0pZpBg9Vidf9ZJU+NYtKXJpAdUFaWdQI08yjq/ Fp5fsgjGgc3+bdr5oXxn34VdQuopyOBRKH4GIZ1vB+4HWGhqC5iKNhILvjgloerl kokPnhk7YYPdM2AJJewPOvg1UoEFR+H3lcyc2Iwz6J1FuyssX1s+DF2s83Mvfgbu 0J4Q3AQbQjG6DGrjufwCP5Qb0Xr+cvFUKBjoQQ+z7mwEZGwPTE4qFv+2+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARa3fjr1fUTsWOsF2UKf7St/e+kMB8GA1UdIwQY MBaAFCc1sZ2yfT8td9QIGIRTviazRVCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wMDY4MmMtZjMwZS00OTQ1LWFkODQt YzViMGVmNGU3YmM2LzEvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wMDY4MmMtZjMwZS00OTQ1LWFkODQtYzViMGVmNGU3YmM2 LzEvSnpXeG5iSjlQeTEzMUFnWWhGTy1Kck5GVUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnzPFzeS MIifIqcKAFp2lhuLd6XIlbjn4ScN1LS7tOS6zUg9ekBijpFVQqhpKMgrpCtTbMvn eowo2HchAO3+j0vyOZ8sEUu/goeIjFU1np1wQYuR9/Nj/6vPons9W5yQnkDXo3XX n4AVOyoQ9DGZ05K7bGQmseSQIFgrXJgNTohuVqznSUyZ/9kQthzXcX8kX9oWE6CE Ucoitn+lnVwWVBY2xeuVZ4kl0JV3Uz+bbHPu/pg/1WYQTGptdcGwsYE+TLMZnW43 Y4jhysYgRm3VfIhNskFNGPV+SAeNOJUipLd81kq6YJnpnpJJEmXVgFwYGE8x8R3+ suX/ZuOU8Brc3A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:22 2025 by rpki-client